[wp-trac] [WordPress Trac] #16410: Open basedir problem in /wp-includes/theme.php

WordPress Trac wp-trac at lists.automattic.com
Sun Jan 30 16:18:13 UTC 2011


#16410: Open basedir problem in /wp-includes/theme.php
--------------------------+-----------------------------
 Reporter:  webraket      |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Themes        |    Version:  3.0.4
 Severity:  major         |   Keywords:
--------------------------+-----------------------------
 On line 590 in theme.php there's:

 {{{
 if ( is_dir($theme_root . '/' . $theme_dir) && is_readable($theme_root .
 '/' . $theme_dir) ) {
 }}}

 please change this to:

 {{{
 if ( $theme_dir!=".." && is_dir($theme_root . '/' . $theme_dir) &&
 is_readable($theme_root . '/' . $theme_dir) ) {
 }}}

 is_dir() should not check .. and . folders, this results in open basedir
 errors when sharing themes between multiple installs. (symlinked)

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/16410>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list